webspeed-exec.txt

Because of a flaw in cpyfile.p which is a default installed file it is possible to gain full control of a machine running Progress Webspeed Messenger. You can access, change and edit allmost any file on the server running the Webspeed Messenger even when the workshop is disabled. First you have t...

Progress Webspeed exploit for all releases

Because of a flaw in cpyfile.p which is a default installed file it is possible to gain full control of a machine running Progress Webspeed Messenger. You can access, change and edit allmost any file on the server running the Webspeed Messenger even when the workshop is disabled. First you have t...

Progress 3.1 - Webspeed _CPYFile.P Unauthorized Access

source: https://www.securityfocus.com/bid/23634/info Progress WebSpeed is prone to a vulnerability that lets attackers gain unauthorized access to and execute administrative scripts. An attacker may leverage this issue to create and execute malicious WebSpeed code on the host running the webserve...

Progress 3.1 - Webspeed _CPYFile.P Unauthorized Access

Progress 3.1 - Webspeed CPYFile.P Unauthorized Access source: https://www.securityfocus.com/bid/23634/info Progress WebSpeed is prone to a vulnerability that lets attackers gain unauthorized access to and execute administrative scripts. An attacker may leverage this issue to create and execute...

PHP Upload Progress Meter UploadProgress.C远程缓冲区溢出漏洞

Upload Progress Meter是一款基于PHP的文件上传应用程序。 Upload Progress Meter uploadprogress.c存在缓冲区溢出，远程攻击者可以利用漏洞进行拒绝服务攻击，存在执行任意指令可能。 efree函数中存在堆溢出，精心构建提交数据，可能导致覆盖内存而造成任意指令执行。 Bitflux Upload Progress Meter 8275 Bitflux Upload Progress Meter 8215 厂商解决方案 升级到最新程序： Bitflux Upload Progress Meter 8275 Bitflux...

CVE-2006-6361

Heap-based buffer overflow in the uploadprogressphprfc1867file function in uploadprogress.c in Bitflux Upload Progress Meter before 8276 allows remote attackers to cause a denial of service crash or execute arbitrary code via crafted HTTP POST fileupload requests...

CVE-2006-6361

The CVE-2006-6361 issue affects Bitflux Upload Progress Meter (before build 8276). A heap-based buffer overflow occurs in uploadprogress_php_rfc1867_file (uploadprogress.c) when processing crafted HTTP POST fileupload requests, enabling remote attackers to crash the service or potentially execute...

CVE-2006-6361

Heap-based buffer overflow in the uploadprogressphprfc1867file function in uploadprogress.c in Bitflux Upload Progress Meter before 8276 allows remote attackers to cause a denial of service crash or execute arbitrary code via crafted HTTP POST fileupload requests...

Progress Database Server 8.3b (prodb) Local Root Exploit

No description provided by source. / progress database server v8.3b local root compromise. for sco-unix and linux on linux redhat 6.2 and SCOSV scosysv 3.2 5.05 this is just one of it, advisory about the bug discovery grabbed from packetstorm, which was originally found by:...

CVE-2006-4619

The start update window in update.exe in Avira AntiVir PersonalEdition Classic 7.0 build 151 allows local users to gain system privileges via a "Shatter" style attack on the 1 IParam parameter, and the 2 PBMGETRANGE and 3 PBMSETRANGE messages in an unspecified progress bar. NOTE: some details are...

Microsoft HTML Help Workshop (.hhp file) Buffer Overflow Exploit (new)

Exploit for unknown platform in category dos / poc ====================================================================== Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit new ====================================================================== OPTIONS Compatibility=1.1 or later...

Microsoft HTML Help Workshop (.hhp file) Denial of Service

No description provided by source. OPTIONS Compatibility=1.1 or later Compiled...

Microsoft HTML Help Workshop - .hhp Denial of Service

Microsoft HTML Help Workshop - .hhp Denial of Service OPTIONS Compatibility=1.1 or later Compiled...

CVE-2005-4841

The Outlook Progress Ctl control allows remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer...

MySource 2.14 - upgrade_in_progress_backend.php?target_url Cross-Site Scripting

MySource 2.14 - upgradeinprogressbackend.php?targeturl Cross-Site Scripting source: https://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

CVE-2004-2743

upload.cgi in Mega Upload Progress Bar before 1.45 allows remote attackers to copy or overwrite arbitrary files via unspecified parameters related to names of uploaded files...

shatterSEH3.txt

============================================================================ = Shattering SEH III = = [email protected] = http://www.security-assessment.com = = Originally posted: September 29, 2003 ============================================================================ ==...

CVE-2003-0449

Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to gain privileges via 1 a PATH environment variable that points to malicious libraries, as demonstrated using libjutil.so inproapsv, or 2 the -installdir command line parameter, as...

CVE-2003-0485

Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long, invalid data type...

CVE-2003-0485

CVE-2003-0485 describes a buffer overflow in Progress 4GL Compiler 9.1D06 and earlier. The vulnerability occurs when compiling source code containing a long, invalid data type, potentially allowing an attacker to execute arbitrary code. According to the provided documents, the exploit details are...